Approved changes feed: RSS · Atom

cpe:2.3:a:ntpsec:ntpsec:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorNtpsec (c7e54110-3f4d-5834-80af-76a04baa27a4)
ProductNtpsec (3147871e-e611-5dde-9369-37c846d2a777)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ntpsec/ntpsec purl2cpe 2026-06-01 10:15:00.830652
pkg:deb/debian/ntpsec purl2cpe 2026-06-01 10:15:00.830653
pkg:deb/ubuntu/ntpsec purl2cpe 2026-06-01 10:15:00.830654
pkg:github/ntpsec/ntpsec purl2cpe 2026-06-01 10:15:00.830656
pkg:rpm/fedora/ntpsec purl2cpe 2026-06-01 10:15:00.830657
pkg:rpm/opensuse/ntpsec purl2cpe 2026-06-01 10:15:00.830658

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4012 vulnerable 2026-06-08 06:16:10.952760 Incomplete Internal State Distinction in ntpsec
HIGH (7.5)
ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
Published: 2023-08-07T17:30:33.452Z
Updated: 2026-06-22T04:07:22.152Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.